Privacy Policy

1. Who is responsible for your data

VT Group (“we”, “us” or “our”) provides Traffic AI and is the controller of account, sales, support and website-measurement data described in this notice. Contact us at contato@vtgroup.ai. Our full trading details and postal address are supplied with the purchase information and order confirmation.

Where a customer connects advertising, customer-relationship or checkout data to Traffic AI, that customer normally decides why the data is used. In that context, the customer is the controller and VT Group processes the data on its behalf to provide the service.

2. Data we process

• Account and contact data: name, email address, authentication records, language, role, business context, support messages and access status.
• Configuration and credentials: Meta account identifiers and access tokens; OpenAI, Anthropic or other enabled provider keys; offer details; financial targets; notification and HITL preferences. Secrets are encrypted at rest and are not exposed in the browser or application logs.
• Advertising and product data: campaigns, ad sets, ads, creatives, spend, conversion and funnel metrics, reports, generated copy, strategic outputs and audit records.
• Attribution data, when Tracking Pro or an equivalent integration is enabled: a first-party tracking identifier, URL, UTM parameters, referrer signals, IP address, user agent, Meta browser identifiers and transaction or lead information supplied by the customer’s connected services. Contact data such as email, telephone, name and address may be normalised and hashed before being sent to Meta’s Conversions API.
• Optional UK website measurement, after consent: Meta Pixel identifiers, first-party tracking identifier, UTM parameters, page URL, IP address and user agent. We do not run these optional technologies before you accept them.
• Technical and security data: timestamps, device and request information, security logs and records of approved or rejected actions.
• Payment data: payment providers process card or payment details. We may receive order identifiers, status, value and customer contact details needed to provide access, support refunds and keep accounting records, but we do not store full card details.

3. Why we use data and our legal bases

• Contract: to create and secure your account, provide Traffic AI, synchronise connected services, deliver support and administer your licence.
• Legitimate interests: to protect the service, prevent misuse, maintain audit trails, diagnose faults and improve reliability, where those interests are not overridden by your rights.
• Consent: to run optional UK advertising and analytics technologies. You may reject them or withdraw consent at any time through “Cookie settings”.
• Legal obligation: to retain records required for tax, accounting, dispute resolution or lawful requests.
• Customer instructions: when we act as a processor for connected campaign, attribution or customer data.

4. How Traffic AI uses connected providers

• Meta: to read permitted advertising data and, only after the required HITL approval and security checks, apply approved actions through the official API. Optional measurement may use Meta Pixel and the Conversions API.
• AI providers: to analyse campaigns and generate requested outputs with the provider and key selected by the customer. Provider retention and model-improvement settings depend on the customer’s account and the provider terms in force.
• Firecrawl or other enabled research providers: to process public pages when the customer requests competitor or page analysis.
• Infrastructure and communications providers: to host the application and data, deliver email, secure sessions and operate support.

We do not sell personal data. We disclose only what is necessary to deliver, secure and administer the service, or where the law requires it. Customers remain responsible for ensuring that their use of connected data has a valid legal basis and appropriate privacy information.

5. Cookies and similar technologies on the UK site

• Essential storage supports security, authentication, language, active-account selection and your privacy preference. It cannot be switched off where it is needed to provide the site or service.
• Optional first-party measurement may store vt_tid for up to one year and campaign parameters in local storage.
• Optional Meta measurement may set or read _fbp and _fbc and send page and campaign events to Meta.

Optional measurement is disabled by default. “Reject non-essential” leaves it disabled. If you withdraw consent after accepting, we remove the known first-party identifiers and reload the page to stop further measurement from Traffic AI. Browser or Meta controls may also be used to remove data already stored by those services.

6. Storage, security and retention

• Credentials are encrypted at rest and decrypted server-side only when an authorised operation needs them. Customers remain responsible for the keys they provide, provider charges, rotation and revocation.
• Account, configuration and product data are kept while needed to provide the licence. Tracking sessions and operational artefacts are retained only for their configured operational purpose.
• Security, transaction and HITL audit records may be retained for longer where needed to establish, exercise or defend legal claims or meet legal obligations.
• When data is no longer needed, it is deleted or anonymised. A verified deletion request can be made using the process on our Data Deletion page.

7. International transfers

VT Group is established in Brazil and Traffic AI may use providers or infrastructure outside the United Kingdom. This means personal data may be transferred internationally.

Where UK data-protection law requires a transfer safeguard, we use an applicable adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful safeguard, and assess supplementary measures where appropriate. Customers should also review the locations and safeguards offered by providers they choose through BYOK.

8. Your UK data-protection rights

Depending on the circumstances, you may have the right to:

• Be informed about how your personal data is used and obtain access to it.
• Correct inaccurate or incomplete data.
• Request deletion or restriction of processing.
• Object to processing based on legitimate interests or to direct marketing.
• Receive eligible data in a portable format.
• Withdraw consent at any time, without affecting earlier lawful processing.
• Complain to the UK Information Commissioner’s Office (ICO).

Contact contato@vtgroup.ai to exercise a right. We may need to verify your identity and will respond within the period required by applicable law. You can also visit the ICO complaints guidance.

9. Automated decisions and children

Traffic AI produces analyses and proposed advertising actions, but sensitive campaign actions remain subject to human approval and execution guardrails. We do not use account data to make solely automated decisions that produce legal or similarly significant effects on an individual.

Traffic AI is a business product and is not directed at children. Customers must not connect children’s data unless they have a lawful basis and suitable safeguards.

10. Changes and contact

We may update this notice when the service or legal requirements change. We will provide an appropriate notice of material changes; a new legal basis or consent will be obtained where required.

Privacy questions and rights requests: contato@vtgroup.ai. For deletion instructions, see our Data Deletion page.